From 27e24a7f1c2194066d1821d47bd9704a03327c6f Mon Sep 17 00:00:00 2001
From: AndrewZuo01 <andrew.zuo@wustl.edu>
Date: Mon, 8 Jan 2024 10:41:17 +0800
Subject: [PATCH] update user command get all user access check

---
 internal/rpc/user/user.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/internal/rpc/user/user.go b/internal/rpc/user/user.go
index eab1a4e94..3295f18f6 100644
--- a/internal/rpc/user/user.go
+++ b/internal/rpc/user/user.go
@@ -483,6 +483,10 @@ func (s *userServer) ProcessUserCommandGet(ctx context.Context, req *pbuser.Proc
 }
 
 func (s *userServer) ProcessUserCommandGetAll(ctx context.Context, req *pbuser.ProcessUserCommandGetAllReq) (*pbuser.ProcessUserCommandGetAllResp, error) {
+	err := authverify.CheckAccessV3(ctx, req.UserID)
+	if err != nil {
+		return nil, err
+	}
 	// Fetch user commands from the database
 	commands, err := s.UserDatabase.GetAllUserCommands(ctx, req.UserID)
 	if err != nil {